Merge pull request #9 from pteich/export-formats

Support multiple output formats

Makefile

@@ -1,5 +1,5 @@
 BINARY=es-query-csv
-VERSION=1.3.1
+VERSION=v1.4.0
 BUILD_TIME=`date +%FT%T%z`
 GOX_OSARCH="darwin/amd64 darwin/arm64 linux/386 linux/amd64 windows/386 windows/amd64"
 

README.md

@@ -26,10 +26,17 @@ es-query-export -c "http://localhost:9200" -i "logstash-*" --startdate="2019-04-
 | `-q --query`   |                       | Lucene query to match documents (same as in Kibana) |
 | `   --fields`  |                       | define a comma separated list of fields to export |
 | `-o --outfile` | output.csv            | name of output file |
+| `-f --outformat` | csv            | format of the output data: possible values csv, json, raw |
 | `-r --rawquery`|                       | optional raw ElasticSearch query JSON string |
 | `-s --start`   |                       | optional start date - Format: YYYY-MM-DDThh:mm:ss.SSSZ. or any other Elasticsearch default format |
 | `-e --end`     |                       | optional end date - Format: YYYY-MM-DDThh:mm:ss.SSSZ. or any other Elasticsearch default format |
 | `--timefield`  |                       | optional time field to use, default to @timestamp |
 | `--verifySSL`  | true                  | optional define how to handle SSL certificates |
 | `--user`       |                       | optional username |
 | `--pass`       |                       | optional password |
+
+## Output Formats
+
+- `csv` - all or selected fields separated by comma (,)
+- `json` - all or selected fields as JSON objects, one per line
+- `raw` - JSON dump of matching documents including id, index and _source field containing the document data. One document as JSON object per line.